Privacy Policy
Last updated: March 27, 2026
Twenty6 Red, Inc. ("Company," "we," "us," or "our") operates the BoxStir platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Information You Provide
- Account information: name, email address, company name, and password when you register
- Payment information: billing details processed securely through our payment processor (Stripe). We do not store full credit card numbers.
- Uploaded content: CAD die-line files, images, and associated metadata you upload to the Service
- Communications: information you provide when you contact us for support or inquiries
Information Collected Automatically
- Usage data: search queries, features accessed, pages viewed, and interaction patterns
- Device information: browser type, operating system, IP address, and device identifiers
- Cookies: we use essential cookies for authentication and session management
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your uploaded files using AI to generate searchable indexes and embeddings
- Process payments and manage your subscription
- Send transactional communications (account verification, billing, security alerts)
- Respond to your support requests and inquiries
- Analyze usage patterns to improve performance and user experience
- Detect, prevent, and address technical issues and security threats
3. AI Processing
BoxStir uses artificial intelligence services, including third-party AI providers, to analyze and index your uploaded files. This processing includes:
- Extracting text and structural information from CAD files
- Generating vector embeddings for semantic search
- Analyzing visual content for image-based search
Your files may be transmitted to third-party AI service providers for processing. These providers are contractually obligated to process data solely for the purpose of providing the Service and are prohibited from using your data for training their models.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service providers: third parties that help us operate the Service (hosting, payment processing, AI processing, email delivery)
- Portal recipients: when you create a client portal link, the content you select will be accessible to anyone with that link
- Legal requirements: when required by law, regulation, or legal process
- Business transfers: in connection with a merger, acquisition, or sale of assets
- With your consent: when you explicitly authorize sharing
5. Data Retention
We retain your account information and uploaded content for as long as your account is active. Upon account termination, we will make your content available for export for 30 days, after which it will be permanently deleted. We may retain anonymized, aggregated data for analytics purposes.
6. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS/SSL) and at rest
- Tenant-level data isolation (each organization's data is stored separately)
- Regular security assessments and monitoring
- Role-based access controls within the platform
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Export your data in a portable format
- Opt out of certain data processing activities
To exercise these rights, contact us at privacy@boxstir.com.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
Twenty6 Red, Inc.
Email: privacy@boxstir.com